Seeker — Trace Mobile Location of Anyone
First we need to clone this tool from it’s Github repository using following command:
The screenshot of the command is following :
After cloning finished we need to go in seeker’s directory, to do that and to see the files we use cd command and ls command so we apply both commands together:
The screenshot is following:
Here we can see the files. First we need to run the installer.sh . This tool also can be run from mobile devices using Termux app. Termux is a terminal emulator with an extensive Linux package collection. If we use a mobile device and using Termux application then we choose the termux-install.sh installer file.
So, the command for our Kali Linux system will be following:
This will install all requirements to run seeker. The screenshot is following:
To run this tool we must need to have python3 in our system. Python3 comes preinstalled with Kali Linux but if our system doesn’t have Python3 then we should read our this tutorial. To run seeker we use following command:
The screenshot is following:
Now, we get multiple options. First option is NearYou and second one is GoogleDrive. We also can create a Telegram and Whatsapp group invite. First we create a Gdrive then we will look at the Whatsapp method.
Google Drive Method
We choose option number for Google drive links. Google drive links can look more genuine for the target user. Social
engineering techniques will help us to choose a google drive file as per
target’s interest(it can be movies or lottery or something else). Then
we need a shareable link of Google drive.
Then we paste the link and press enter.
Here this is on our localhost sever. We can forward our port 8080 by port forwarding this is may be done by changing our router’s settings or we can do it by ngrok or other ssh port forwarding methods. For port forwarding we suggest to our port forwarding tutorial.
The screenshot is following:
Now we can send this link to the victim. When victim opens this link he/she can see the Google drive page and that page will prompt victim for location information. If he/she “Allow” this we got all the location information.
Whatsapp Group Invite Method
Rest the port forwarding we have given an example in Google Drive method.
Getting the Location
When ever target clicks on attacker’s shared link and try to any activity this asks for location permission. If the victim clicks “Allow” we got victim’s location.
 |
| We got target’s device details and location |
Now we just copy the Whatsapp group invitation link and send it to victim. We shouldn’t worry because this will be a fake webpage exactly like Whatsapp group invitation. The victim will try to connect and we got the location and device info. Victim always get group full notification.
Extra Social Engineering
Now we can send this link to our target but their will minimum chance
that our target will click on the link. So we need to do some extra Social
Engineering. Suppose we know that our target is jobless and he need
some money also target loves to make new friends. In this case we
firstly shorten this long URL with bit.ly or any other URL shortener
which open the link directly.
Then we send the shorten URL via SMS or any other social media and when
our target see the SMS it will looks like following screenshot:
How to be Safe from this
To be safe from this kind of attack we should not open any serveo.net, ngrok or localhost URLs, but if attacker using shorten links we can expand the links from Expand URL‘s website.
How much enjoyed this easy tutorial ? Follow us on Twitter and Medium to get more updates.
65 comments